fix(oci): reject absolute paths and directory traversal attempts in target path construction (#1658)